Secure Localization via Multi-Power Wireless Signaling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional wireless network localization systems are vulnerable to malicious users who can deceive location determination, and existing secure solutions, such as time-of-flight techniques, are costly to implement.
Innovation Solution
A secure localization system using secure message transmitters that broadcast messages at multiple power levels, with reference points at known locations reporting received messages to a localization controller, allowing for secure and cost-effective location determination by comparing reports.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional signal strength-based localization schemes are used, then location determination is achieved, but the system becomes vulnerable to malicious users deceiving location determination
Solution Approach 1:
The patent introduces a trusted third party (the system administrator or authentication server) that mediates between the client and the location determination process. This intermediary verifies the client's identity and authenticates location reports before they are accepted, preventing malicious users from deceiving the system. The intermediary acts as a gatekeeper that validates information without requiring direct trust between all parties.
Solution Approach 2:
The system implements feedback mechanisms where location reports from clients are verified and authenticated by the system administrator before being processed. The system provides feedback to clients about the authenticity of their location data and can reject fraudulent reports. This feedback loop ensures that only verified location information is used for determining client positions, thereby preventing deception by malicious users.
2Reliability
If time-of-flight technique is used for secure location determination, then location security is improved, but the infrastructure cost increases
Solution Approach 1:
The patent makes existing network devices (routers, access points, servers) perform multiple functions: they serve both as communication infrastructure and as location determination components. These devices can authenticate clients, verify location reports, and participate in the location determination process without requiring specialized hardware. This multi-functionality eliminates the need for separate secure location infrastructure while maintaining security benefits.
Solution Approach 2:
The system creates virtual copies of location determination functionality within existing network devices rather than deploying dedicated physical infrastructure. Location verification and authentication mechanisms are implemented as software functions that replicate secure location determination capabilities using readily available network hardware, thereby reducing infrastructure costs while maintaining security.
3Measurement precision
If GPS-based location systems are used, then location determination is achieved, but the system becomes prone to compromise by malicious end users
Solution Approach 1:
The patent introduces a trusted intermediary (system administrator or authentication server) that mediates between the client and the location determination process. This intermediary verifies the client's identity and authenticates location reports before they are accepted, preventing malicious users from deceiving the system. The intermediary acts as a gatekeeper that validates information without requiring direct trust between all parties.
Solution Approach 2:
The system segments the location determination process into distinct phases: client reports location, intermediary verifies authenticity, and system processes verified location data. This segmentation allows the system to maintain measurement precision from multiple sources while adding a security layer that prevents malicious deception by requiring authentication at each stage.
Data Source
AI summary
Embodiments of the present invention disclose a secure localization infrastructure using transmitters that can transmit messages at multiple distinct power levels throughout a community of reference points. Transmitters send messages at different power levels in a manner that every location in the system corresponds to a unique set of messages. Received messages are reported back to the localization infrastructure, which then determines location by comparing the messages reported.